Cover: The bugs were old. The clock is new.
What happened: AI made old holes usable in hours while defenders still take 247 days
Where it breaks: 92% lacked AI access controls, 43% shadow AI, 48% third party, 34.6% of PHP sites on PHP 7 or older
How to fix it: six layers of defence around the model
Where to start: identity and sandbox first, then automated checks